{"action":"Upgrade com.ctrip.framework.apollo:apollo to 2.3.0 or later.","affected":[{"fixed":"2.3.0","introduced":"0"}],"component":"com.ctrip.framework.apollo:apollo","cve_ids":["CVE-2024-43397"],"ecosystem":"Maven","epss":0.00349,"exploited":false,"fixed_versions":["2.3.0"],"ghsa_id":"GHSA-c6c3-h4f7-3962","id":"tcs_01M5N8RQE1E226A7DTYZP68X7Y","modified_at":"2024-08-20T18:58:55.526196Z","published_at":"2024-08-20T18:36:40Z","references":["https://osv.dev/vulnerability/GHSA-c6c3-h4f7-3962","https://github.com/apolloconfig/apollo/security/advisories/GHSA-c6c3-h4f7-3962","https://nvd.nist.gov/vuln/detail/CVE-2024-43397","https://github.com/apolloconfig/apollo/pull/5192","https://github.com/apolloconfig/apollo/commit/f55b419145bf9d4f2f51dd4cd45108229e8d97ed","https://github.com/apolloconfig/apollo","https://github.com/apolloconfig/apollo/releases/tag/v2.3.0"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-c6c3-h4f7-3962","url":"https://osv.dev/vulnerability/GHSA-c6c3-h4f7-3962"}],"summary":"apollo-portal has potential unauthorized access issue"}